From owner-freebsd-questions  Mon Jul 31  4:19: 7 2000
Delivered-To: freebsd-questions@freebsd.org
Received: from mail.gmx.net (pop.gmx.net [194.221.183.20])
	by hub.freebsd.org (Postfix) with SMTP id EA14337BC17
	for <freebsd-questions@FreeBSD.ORG>; Mon, 31 Jul 2000 04:19:01 -0700 (PDT)
	(envelope-from pirol9999@gmx.net)
Received: (qmail 9656 invoked by uid 0); 31 Jul 2000 11:18:59 -0000
Received: from p3e9c34c5.dip0.t-ipconnect.de (HELO gmx.net) (62.156.52.197)
  by mail.gmx.net with SMTP; 31 Jul 2000 11:18:59 -0000
Date: Mon, 31 Jul 2000 13:21:08 +0200
From: Jens Sauer <pirol9999@gmx.net>
Reply-To: Jens Sauer <pirol9999@gmx.net>
To: freebsd-questions@FreeBSD.ORG
Cc: mico@bsd.hu, Alexander@Leidinger.net
Subject: Re: Where to put a command?
X-Mailer: Jens Sauer's registered AK-Mail 3.1 publicbeta2a [ger]
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Message-Id: <20000731111901.EA14337BC17@hub.freebsd.org>
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

> Hello,

> Jens Sauer:

>> can anybody tell me, where to put a command,
>> that shall be executed every time my ISDN-Card
>> dials out again ("on demand" - and gets a new IP-address).
>> I have to refresh my firewall-rules at every
>> change of the outside-ip-address

> If you are using user-level PPP, you can use its ppp.linkup features,
> otherwise man isdnd.rc:

>              connectprog    specifies a program run everytime after a
>              connec-
>                             tion is established and address negotiation is
>                             complete (i.e.: the connection is useable).
>                             Isdnd
>                             expects to find the program below the path
>                             /etc/isdn which is prepended to the string
>                             speci-
>                             fied as a parameter to this keyword.  The
>                             programs
>                             specified by connect and disconnect will get
>                             the
>                             following command line arguments: -d (device)
>                             -f
>                             (flag) [ -a (addr) ] where device is the name
>                             of
>                             device, e.g. "isp0", flag will be "up" if
>                             connec-
>                             tion just got up, or "down" if interface
>                             changed
>                             to down state and addr the address that got
>                             as-
>                             signed to the interface as a dotted-quad ip
>                             ad-
>                             dress (optional, only if it can be figured out
>                             by
>                             isdnd). (optional)


>   If you are dealing with the packet filter you should deal with it a bit
>   more,
> it would be better if it wouldn't need refresh every time.  You should
> specify your tun0 or isp0 interface, not their IP address. If you are
> using
> user-level PPP, please take a look at its filtering features.

> Good luck.
> --
>  ______  o _. __
> / / / (_(_(__(_)  @ bsd.hu

Hello, first thank you very much.

I have to do the refresh, because there is no other way (at this time), when
being "silly" enough to use IPFILTER (hard for newbies).
I will try the "connectprog"-feature (I'm using kernel-level PPP) and report
back.

Thanks again
Cheerio
Jens


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message